To activate Secure Boot in Windows 10 , you have to change a setting in your PC’s UEFI/BIOS firmware, not inside regular Windows settings. The exact wording and menu layout vary by manufacturer (Dell, HP, Lenovo, ASUS, MSI, etc.), but the overall process is similar on most systems.

Quick Scoop

  • You enable Secure Boot in the UEFI/BIOS, not in normal Windows settings.
  • Your system must be using UEFI (not Legacy/CSM) and usually GPT partitioning for Windows.
  • Steps differ slightly per brand, but always involve: enter firmware → switch to UEFI mode → enable Secure Boot → save and reboot.

Step 1: Check Secure Boot status in Windows 10

Before changing anything, check whether Secure Boot is already on.

  1. Press Windows key + R , type msinfo32, and press Enter.
  1. In System Information , look for:
    • BIOS Mode → should say UEFI for Secure Boot to work.
 * **Secure Boot State** → shows _On_ , _Off_ , or _Unsupported_.

If Secure Boot State = On , you’re done already.

If BIOS Mode = Legacy , you must switch to UEFI in firmware and often convert the disk to GPT, which can be more advanced.

Step 2: Enter UEFI/BIOS firmware from Windows

Windows 10 has a built‑in way to reboot into firmware on most modern PCs.

  1. Open Settings → Update & Security → Recovery.
  1. Under Advanced startup , click Restart now.
  1. When the blue menu appears:
    • Choose Troubleshoot → Advanced options → UEFI Firmware Settings → Restart.

Your PC will reboot directly into the UEFI/BIOS screen.

If this option does not appear, you can use the traditional way: restart and repeatedly tap the key your manufacturer uses (often F2 , F10 , Del , or Esc) as the system starts.

Step 3: Prepare firmware (UEFI mode, CSM off)

On many systems, Secure Boot only works when:

  • Boot mode is set to UEFI.
  • CSM / Legacy Boot is disabled.

Look for these typical labels (exact wording depends on the brand):

  • Tab or menu names: Boot , Security , Authentication , or Advanced.
  • Options to check:
    • Boot Mode / UEFI / Legacy → set to UEFI.
* **CSM** , **Legacy Support** , or **Compatibility Support Module** → set to **Disabled**.

Be careful: switching from Legacy/CSM to UEFI on a disk that is still MBR can make Windows unbootable until converted to GPT. Many guides recommend backing up important data before changing these options.

Step 4: Enable Secure Boot in firmware

Once UEFI mode is active:

  1. Go to the tab that contains Secure Boot (often under Boot , Security , or Authentication).
  1. Set:
    • Secure Boot → Enabled.
 * If there is an **OS Type** option, choose **Windows UEFI mode** (or similar wording).

 * If there is **Secure Boot mode** , choose **Standard** or **Default** to use the default keys.
  1. On some older boards, open Key Management and choose Install Default Secure Boot Keys if keys aren’t installed yet.
  1. Press the save‑and‑exit hotkey (commonly F10), confirm changes, and let the PC reboot.

Step 5: Confirm Secure Boot is active

After Windows 10 loads:

  1. Press Windows key + R , type msinfo32, press Enter.
  1. Check Secure Boot State again:
    • If it says On , Secure Boot is successfully enabled.
 * If it still says **Off** or shows messages like “Secure Boot enabled but not active,” there may still be CSM/Legacy options enabled or key/firmware quirks to resolve.

Some users report that Secure Boot showing as “enabled but not active” is often fixed by fully disabling CSM and making sure the disk and OS are in UEFI/GPT configuration.

Brand-specific notes & common issues

Different manufacturers use different hotkeys and menu names, but the Secure Boot logic is the same.

  • Dell :
    • Press F2 at startup to enter UEFI.
* Find **Boot Configuration → Secure Boot** , toggle to **Enabled** , then save and exit.
  • ASUS / MSI / other desktop boards :
    • Enter firmware with Del or F2.
* In **Advanced Mode** , go to **Boot** and switch **Secure Boot** from Disabled to Enabled.

* Ensure **CSM** is Disabled and **OS Type = Windows UEFI** if available.

Frequent stumbling blocks users discuss in forums:

  • Game launchers (Valorant, FIFA, Battlefield, etc.) complaining that Secure Boot is not enabled even after changes, often due to CSM still being active or keys not installed.
  • Fear of “bricking” the PC, which is rare if you only toggle Secure Boot/CSM and do not flash firmware or change voltages.

If you’re stuck or nervous

Because incorrectly changing boot mode on an MBR disk can stop Windows from booting, many step‑by‑step video walkthroughs and vendor guides exist to show this process visually. If anything looks different on your screen (for example, no Secure Boot option at all), it may indicate:

  • Very old hardware that does not support Secure Boot.
  • A need for a BIOS/UEFI firmware update from the manufacturer for full Windows 10/11 compatibility.

TL;DR : For “how to activate secure boot Windows 10,” the core path is: check status in msinfo32 → reboot into UEFI firmware → switch to pure UEFI mode with CSM off → enable Secure Boot and default keys → save → confirm in System Information that Secure Boot State = On.

Information gathered from public forums or data available on the internet and portrayed here.